Forum Discussion
Girishb401
Nimbostratus
NimbostratusCookie Does Not Contain The "secure" Attribute on ltm vip
Our security team reported that multiple vulnerabilities has been detected on one of VIP: 1.2.3.4 (on BIG-IP LTM v12.1.2 version.) Please refer the list as below 1.Cookie Does Not Contain The...
Lidev
MVP
MVPHi,
If you don't use cookie persistence profile, you need to configure the BIG-IP ASM to use secure and HttpOnly cookie flag.
Check in your ASM Policy configuration, Security ›› Application Security : Headers : Cookies List ›› Edit Cookie